zpericic
ca1b8cf1ba
Quadlet does not support User= in system units: the generated pod service writes its conmon pidfile to %t/%N.pid, which resolves to /run/authelia-pod.pid and is unwritable by the authelia user, so authelia-pod.service always failed with status 125. See podman-systemd.unit(5). - Move all quadlet files and drop-ins to the rootless search path /etc/containers/systemd/users/126; units now run in the authelia user's systemd manager, started at boot via linger - Drop the [Service] User=/HOME overrides from the quadlet files - Enable the pod via WantedBy=default.target - Make /etc/authelia authelia-owned so rootless podman can relabel the config bind mount (:z) - Replace system-unit systemd macros in the -container scriptlets with systemctl --user -M authelia@ daemon-reload / stop
18 lines
494 B
INI
18 lines
494 B
INI
[Unit]
|
|
Description=Authelia authentication and authorization server
|
|
|
|
[Container]
|
|
ContainerName=authelia
|
|
Image=docker.io/authelia/authelia:4.39.20@sha256:1b363e9279e742397966333f364e0876ae02bf5c876de73e83af6d48c57ff51b
|
|
Pod=authelia.pod
|
|
Exec=--config /etc/authelia/configuration.yml
|
|
Volume=/etc/authelia:/etc/authelia:ro,z
|
|
Volume=/var/lib/authelia/data:/var/lib/authelia/data:Z
|
|
Volume=/etc/localtime:/etc/localtime:ro
|
|
LogDriver=journald
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=5
|
|
TimeoutStartSec=900
|